CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function.7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function.7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function.7.5 High
- dlink dir-619l firmwareD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function.7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function.7.5 High
- dlink dir-619l, dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function.7.5 High
- moosocialmooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed,...6.5 Medium
- dedecmsAn arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier...8.8 High
- webcatalogWebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron...8.8 High
- eximExim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability3.1 Low
- eximExim Improper Neutralization of Special Elements Remote Code Execution Vulnerability8.1 High
- eximExim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability8.1 High
- eximExim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability9.8 Critical
- eximExim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability3.7 Low
- samsung exynos 2200 firmwareSamsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2).4.7 Medium
- phpkobo ajaxnewstickerAn issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via...8.8 High
- phpkobo ajaxnewstickerCross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to...6.1 Medium
- phpkobo ajaxnewstickerCross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to...6.1 Medium
- binalyze irecAn issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary...7.8 High
- gstreamerGStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- gstreamerGStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability8.8 High
- gstreamerGStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability8.8 High
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A...8.8 High
- economizzerEconomizzer host header injection vulnerability8.8 High
- economizzerEconomizzer remote code execution vulnerability8.8 High
- economizzerEconomizzer vulnerable to Clickjacking6.5 Medium
- economizzerEconomizzer Insecure Direct Object Reference vulnerability3.7 Low
- economizzerEconomizzer user enumeration vulnerability5.3 Medium
- economizzerA SQL injection vulnerability exists in gugoan Economizzer commit 3730880 (April 2023) and v.0.9...9.8 Critical
- oretnom23 packers and movers management systemSourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL...9.8 Critical
Imageflow.AllPlatformsNuGet,Imageflow.ServerNuGet,ImageResizer.Plugins.ImageflowNuGet +18 more +20 moreImageflow affected by libwebp zero-day and should not be used with malicious source images.8.8 High- warp-tech warpgateSSH key password bypassed in warpgate4.8 Medium
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: passwords defined in secrets shown in statefulset yaml5.5 Medium
- matrix hookshot, matrix-org matrix-hookshot +1 moreSandbox escape for instances that have enabled transformation functions in matrix-hookshot5.6 Medium
- fit2cloud jumpserverSSH public key login without private key challenge if mfa is enabled in jumpserver5.4 Medium
- fit2cloud jumpserverRemote code execution on the host system via MongoDB shell in jumpserver8.6 High
@napi-rs/imagenpm@napi-rs/image affected by libwebp CVE8.8 High- argoproj argo cd, argo-cd +1 morePath traversal allows leaking out-of-bound Helm charts from Argo CD repo-server5.0 Medium
- fit2cloud jumpserverNon-MFA account takeover via brute-force attack on weak password reset code in jumpserver8.2 High
- fit2cloud jumpserverNon-MFA account takeover via using only SSH public key to login in jumpserver8.2 High
- scylladbPrivilege escalation from having CREATE access on a keyspace in Scylladb7.2 High
- real time automation 460 series, rtautomation 460 series firmware +1 moreReal Time Automation 460 Series Cross-site Scripting9.4 Critical
- neutrinolabs xrdp, fedoraproject fedora +1 moreUnchecked access to font glyph info in xrdp4.6 Medium
- zephyrproject zephyrPotential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver7.0 High
- cisco wireless lan controller (wlc), mobility express, mobility express software +2 moreA vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could...6.1 Medium
- cisco catalyst 9124 firmware, catalyst 9130 firmware, catalyst 9136 firmware +4 more +6 moreA vulnerability in the networking component of Cisco access point (AP) software could allow an...5.8 Medium
- cisco sd-wan vmanageA vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly...4.3 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for...6.1 Medium
- cisco ios xe software, ios, ios xe +1 more +3 moreA vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS...6.6 Medium
- cisco business 150ax firmware, business 151axm firmware, catalyst 9800 embedded wireless controller firmware +4 more +6 moreCisco Access Point Software Uncontrolled Resource Consumption Vulnerability4.7 Medium
- Show moreLoading…